SOLVED

How to disable two-step verification for all users

Brass Contributor

Hello,

 

I purchased Office 365 Business plan.

And, sign in with new registered user, I see the following dialog "More information required"

clipboard_image_0.png

 

So, I want to disable this behavior.

How to do it ?

 

The following are what I have tried:

 

  1.  Turn off Modern authentication at Admin center (This is not work).
    clipboard_image_1.png
  2. Disable Multi-factor authentication (This is not work).
    clipboard_image_2.png
  3. Add IP addresses to a trusted location (This is not work).
    clipboard_image_3.png

 

10 Replies

@william2001 does this happen to all users, or only with the (admin) account that was created when you registered for the tenant?

 

If this happens only with the admin account, check the Conditional Access policies from https://portal.azure.com. The "Baseline policy: Require MFA for admins" might be enabled by default for new tenants.

This looks like the self-service password reset feature, not MFA. Read here: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment

Hello@Nestori Syynimaa ,

 

Thank you for your reply.

This behavior happens with all users (not only admin).

 

My plan is Office 365 Business (Is this Azure AD free plan?). So, my conditional access policy is empty.

clipboard_image_0.png

 

The following is the screen of Security Baseline.

clipboard_image_1.png

Hello @Vasil Michev ,

Thank you for your reply.

 

I have checked my SSPR settings.

 

SSPR enabled option is None.

clipboard_image_0.png

 

Authentication methods only Email is selected.

clipboard_image_1.png

 

Registration is No.

clipboard_image_2.png

 

Each Notifications options are No.

clipboard_image_4.png

 

I did something wrong?

I cannot figure out another settings. :sad:

 

best response confirmed by joshgeiger (Microsoft)
Solution

My issue is resolved.

 

Disable security defaults.

 

Azure AD > Properties > Manage Security defaults

clipboard_image_0.png

 

Thank you. That just solved a huge pain in the **bleep** for me.
Would have been nice if you could share how to get there, I blew my brain out and still cannot find this page!
There is no properties in my AZURE AD

@QuickH 

All services - Microsoft Azure -> using keyborad (Ctrl+F) search keyword “properties” in that webpage -> your will see "Tenant properties" , details refer to (photograph A) -> Access management for Azure resources (click link: Manage security defaults) -> when you change the value from "Enable" to "Disable" under "Security defaults" in (photograph C), you need to pick a reason before you can save -> IT TOOK ME A LONG TIME TO FIND THIS LOCATION, TO TELL YOU THE TRUTH, I ALMOST CRIED BEFORE I FIGRURE IT OUT (too hungry now, dinner time for me in China)

(photograph A)

nothanksrick_0-1679139381168.png

 

(photograph B)

nothanksrick_1-1679139505306.png

 

(photograph C)

nothanksrick_2-1679139711176.png

 

 

Thanks for your detailed and complete answer. Best regards

For anyone coming across this post and finding their Azure portal doesn't look like the picture, I found the setting under the new Entra admin center at https://entra.microsoft.com/#home.

Scroll down to Quick Navigation and click Tenant Overview:

klittle15_0-1705276569046.png

Switch to the Properties tab:

klittle15_1-1705276621442.png

 

Scroll down to Security defaults and click the "Manage security defaults" link:

klittle15_2-1705276649441.png

And then, as nothanksrick said, switch to Disable, provide a reason, save, and confirm.

1 best response

Accepted Solutions
best response confirmed by joshgeiger (Microsoft)
Solution

My issue is resolved.

 

Disable security defaults.

 

Azure AD > Properties > Manage Security defaults

clipboard_image_0.png

 

View solution in original post